Skip to content

Actions: elastic/detection-rules

Actions

REACT Tests Dispatcher

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
react-tests-dispatcher.yml
1,863 workflow runs
1,863 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[Security Content] Basic EDR Setup Guides - Phase 1 REACT Tests Dispatcher #90: Pull request #4492 opened by w0rk3r
16s basic_edr_setup_2
basic_edr_setup_2
16s
[Rule Tuning] Adjusting Investigation Guide for First Occurrence of Entra ID Auth via DeviceCode Protocol REACT Tests Dispatcher #89: Pull request #4490 opened by terrancedejesus
11s rule-tuning-adjusting-investigation-note-azure-device-code
rule-tuning-adjusting-investigation-note-azure-device-code
11s
[Rule Tuning] Adapt Rules to work with Sysmon REACT Tests Dispatcher #88: Pull request #4480 synchronize by w0rk3r
10s sysmon_rt
sysmon_rt
10s
[Rule Tuning] Adapt Rules to work with Sysmon REACT Tests Dispatcher #87: Pull request #4480 synchronize by w0rk3r
13s sysmon_rt
sysmon_rt
13s
[New Rule] Base64 Decoded Payload Piped to Interpreter REACT Tests Dispatcher #86: Pull request #4488 opened by Aegrah
8s interpreter-launched-from-encoded-command
interpreter-launched-from-encoded-command
8s
[Rule Tuning] Adapt Rules to work with Sysmon REACT Tests Dispatcher #85: Pull request #4480 synchronize by w0rk3r
11s sysmon_rt
sysmon_rt
11s
[New Rule] Unusual File Transfer Utility Launched REACT Tests Dispatcher #84: Pull request #4487 opened by Aegrah
10s unusual-file-transfer-execution
unusual-file-transfer-execution
10s
[New Rule] Unusual Base64 Encoding/Decoding Activity REACT Tests Dispatcher #83: Pull request #4486 synchronize by Aegrah
14s unusual-base64-decoding-execution
unusual-base64-decoding-execution
14s
[New Rule] Unusual Base64 Encoding/Decoding Activity REACT Tests Dispatcher #82: Pull request #4486 opened by Aegrah
15s unusual-base64-decoding-execution
unusual-base64-decoding-execution
15s
[New Rule] Kill Command Execution REACT Tests Dispatcher #81: Pull request #4485 opened by Aegrah
10s kill-command-executed
kill-command-executed
10s
[New Rule] Potential Malware-Driven SSH Brute Force Attempt REACT Tests Dispatcher #80: Pull request #4474 synchronize by Aegrah
9s potential-brute-force-attack-infection
potential-brute-force-attack-infection
9s
[New Rule] High Number of Egress Network Connections from Unusual Executable REACT Tests Dispatcher #79: Pull request #4473 synchronize by Aegrah
10s c2-high-netcon-from-sus-location
c2-high-netcon-from-sus-location
10s
[New Rule] High Number of Egress Network Connections from Unusual Executable REACT Tests Dispatcher #78: Pull request #4473 synchronize by Aegrah
10s c2-high-netcon-from-sus-location
c2-high-netcon-from-sus-location
10s
[Rule Tuning] Adapt Rules to work with Sysmon REACT Tests Dispatcher #77: Pull request #4480 synchronize by w0rk3r
12s sysmon_rt
sysmon_rt
12s
[New Rule] SSH Authorized Keys File Deletion REACT Tests Dispatcher #76: Pull request #4483 synchronize by Aegrah
9s authorized-keys-file-deletion
authorized-keys-file-deletion
9s
[New Rule] Successful SSH Authentication from Unusual IP-Address REACT Tests Dispatcher #75: Pull request #4482 synchronize by Aegrah
10s ssh-authentication-from-unusual-ip
ssh-authentication-from-unusual-ip
10s
[New Rule] Linux User Account Credential Modification REACT Tests Dispatcher #74: Pull request #4484 opened by Aegrah
9s user-password-change-via-pipe
user-password-change-via-pipe
9s
[New Rule] SSH Authorized Keys File Deletion REACT Tests Dispatcher #73: Pull request #4483 opened by Aegrah
10s authorized-keys-file-deletion
authorized-keys-file-deletion
10s
[New Rule] Successful SSH Authentication from Unusual IP-Address REACT Tests Dispatcher #72: Pull request #4482 opened by Aegrah
9s ssh-authentication-from-unusual-ip
ssh-authentication-from-unusual-ip
9s
[New Rule] Successful SSH Authentication from Unusual User REACT Tests Dispatcher #71: Pull request #4481 synchronize by Aegrah
9s ssh-authentication-from-unusual-user
ssh-authentication-from-unusual-user
9s
[New Rule] Successful SSH Authentication from Unusual User REACT Tests Dispatcher #70: Pull request #4481 opened by Aegrah
9s ssh-authentication-from-unusual-user
ssh-authentication-from-unusual-user
9s
[Rule Tuning] MsBuild Making Network Connections REACT Tests Dispatcher #69: Pull request #4479 synchronize by shashank-elastic
10s msbuild_rt
msbuild_rt
10s
[Rule Tuning] Adapt Rules to work with Sysmon REACT Tests Dispatcher #68: Pull request #4480 opened by w0rk3r
12s sysmon_rt
sysmon_rt
12s
[Rule Tuning] MsBuild Making Network Connections REACT Tests Dispatcher #67: Pull request #4479 synchronize by shashank-elastic
11s msbuild_rt
msbuild_rt
11s
[Rule Tuning] MsBuild Making Network Connections REACT Tests Dispatcher #66: Pull request #4479 opened by w0rk3r
12s msbuild_rt
msbuild_rt
12s
ProTip! You can narrow down the results and go further in time using created:<2025-02-21 or the other filters available.